Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/05/2023, 09:32 UTC
General
-
Target
JUN2007_XACT_x86.cab
-
Size
149KB
-
MD5
bdd64c54e351a8716c0ad8a32a1e0241
-
SHA1
4750437448c6f923ee42baa271bc812c6ba16dc0
-
SHA256
e28d18ef520ca81ff7d33dad80b6144771cb82516f01739cef8d3b813c74643d
-
SHA512
ea229698d92a0281703a3d2a119e4a0c70a70bcc4badd2ad3545178e1e62a1becd25b46d4f631f0a559068e0cfa23610d477ed7745a80b9df121b08bed784888
-
SSDEEP
3072:pG7RXkNHRrOaYVD5yEThWmLksx2MeEm6oOD4+3y20OXtGhlYRTPZDT5P/lJXp39M:aX8KVD5yETfLksAMUHo4+T5IhlYRDZDq
Score
1/10
Malware Config
Signatures
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\JUN2007_XACT_x86.cab1⤵
Network
-
DNS84.150.43.20.in-addr.arpaRemote address:8.8.8.8:53Request84.150.43.20.in-addr.arpaIN PTRResponse -
DNS95.221.229.192.in-addr.arpaRemote address:8.8.8.8:53Request95.221.229.192.in-addr.arpaIN PTRResponse
-
DNS28.118.140.52.in-addr.arpaRemote address:8.8.8.8:53Request28.118.140.52.in-addr.arpaIN PTRResponse
-
DNS86.8.109.52.in-addr.arpaRemote address:8.8.8.8:53Request86.8.109.52.in-addr.arpaIN PTRResponse
-
40.125.122.176:443
-
40.125.122.176:443
-
173.223.113.164:443 -
173.223.113.131:80
-
131.253.33.203:80
-
40.125.122.176:443
-
40.125.122.176:443
-
8.238.20.126:80
-
40.125.122.176:443
-
40.125.122.176:443
-
8.8.8.8:5384.150.43.20.in-addr.arpadns
DNS Request
84.150.43.20.in-addr.arpa
-
8.8.8.8:5395.221.229.192.in-addr.arpadns
DNS Request
95.221.229.192.in-addr.arpa
-
8.8.8.8:5328.118.140.52.in-addr.arpadns
DNS Request
28.118.140.52.in-addr.arpa
-
8.8.8.8:5386.8.109.52.in-addr.arpadns
DNS Request
86.8.109.52.in-addr.arpa